[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-21714":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T11:19:25.255Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":62,"related":63,"reserved_at":9,"published_at":78,"modified_at":79,"state":80,"summary":81,"references_raw":90,"kevs":96,"epss":97,"epss_history":100,"metrics":374,"affected":382},"CVE-2026-21714","A memory leak occurs in Node.js HTTP/2 servers when a client sends WINDOW_UPDATE frames on stream 0 (connection-level) that cause the flow control window to exceed the maximum value of 2³¹-1. The server correctly sends a GOAWAY frame, but the Http2Session object is never cleaned up.\r\n\r\nThis vulnerability affects HTTP2 users on Node.js 20, 22, 24 and 25.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-401","Missing Release of Memory after Effective Lifetime","The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.","weakness","Draft","Variant","Medium",[],[],[],[],[24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60],{"_key":25},"DSA-6183-1",{"_key":27},"OPENSUSE-SU-2026:10504-1",{"_key":29},"SUSE-SU-2026:1299-1",{"_key":31},"MGASA-2026-0071",{"_key":33},"SUSE-SU-2026:1363-1",{"_key":35},"SUSE-SU-2026:1371-1",{"_key":37},"SUSE-SU-2026:1478-1",{"_key":39},"SUSE-SU-2026:1509-1",{"_key":41},"SUSE-SU-2026:21181-1",{"_key":43},"OPENSUSE-SU-2026:20519-1",{"_key":45},"UBUNTU-CVE-2026-21714",{"_key":47},"ALPINE-CVE-2026-21714",{"_key":49},"DEBIAN-CVE-2026-21714",{"_key":51},"OPENSUSE-SU-2026:11110-1",{"_key":53},"SUSE-SU-2026:22368-1",{"_key":55},"OPENSUSE-SU-2026:21058-1",{"_key":57},"RHSA-2026:7350",{"_key":59},"RHSA-2026:7670",{"_key":61},"RHSA-2026:7675",[],[64,65,66,67,68,69,70,71,72,73,74,75,76],{"_key":27},{"_key":29},{"_key":31},{"_key":33},{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":43},{"_key":51},{"_key":53},{"_key":55},{"_key":77},"CGA-96PH-RHP8-7JGH","2026-03-30T19:07:28.317Z","2026-03-31T18:05:22.283Z","Awaiting Analysis",{"cisa_kev":82,"cisa_ransomware":82,"cisa_vendor":9,"epss_severity":83,"epss_score":84,"severity":85,"severity_score":86,"severity_version":87,"severity_source":88,"severity_vector":89,"severity_status":80},false,"low",0.00454,"medium",5.3,"v3.0","cve.org","CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",[91],{"url":92,"sources":93,"tags":95},"https://nodejs.org/en/blog/vulnerability/march-2026-security-releases",[88,94],"nvd",[],[],{"date":98,"score":84,"percentile":99},"2026-07-05",0.363,[101,105,108,111,114,118,122,125,128,131,134,137,139,142,145,148,151,154,157,160,163,166,169,172,175,178,181,183,186,189,192,195,199,202,205,208,211,214,217,220,223,226,229,232,235,237,240,243,246,249,252,255,258,261,265,268,271,274,277,280,283,286,289,292,295,298,301,304,308,311,314,317,320,323,326,329,332,335,338,341,344,347,350,353,356,359,362,365,368,371],{"date":102,"score":103,"percentile":104},"2026-03-31",0.00014,0.02311,{"date":106,"score":103,"percentile":107},"2026-04-01",0.02313,{"date":109,"score":103,"percentile":110},"2026-04-02",0.02382,{"date":112,"score":103,"percentile":113},"2026-04-03",0.02392,{"date":115,"score":116,"percentile":117},"2026-04-04",0.00012,0.0161,{"date":119,"score":120,"percentile":121},"2026-04-05",0.00016,0.03372,{"date":123,"score":120,"percentile":124},"2026-04-06",0.03382,{"date":126,"score":120,"percentile":127},"2026-04-07",0.03389,{"date":129,"score":120,"percentile":130},"2026-04-08",0.03392,{"date":132,"score":120,"percentile":133},"2026-04-09",0.03414,{"date":135,"score":120,"percentile":136},"2026-04-10",0.03407,{"date":138,"score":120,"percentile":121},"2026-04-11",{"date":140,"score":120,"percentile":141},"2026-04-12",0.03344,{"date":143,"score":103,"percentile":144},"2026-04-13",0.02682,{"date":146,"score":103,"percentile":147},"2026-04-14",0.02667,{"date":149,"score":103,"percentile":150},"2026-04-15",0.0265,{"date":152,"score":103,"percentile":153},"2026-04-16",0.02664,{"date":155,"score":103,"percentile":156},"2026-04-17",0.02669,{"date":158,"score":103,"percentile":159},"2026-04-18",0.02672,{"date":161,"score":103,"percentile":162},"2026-04-19",0.02663,{"date":164,"score":103,"percentile":165},"2026-04-20",0.02652,{"date":167,"score":120,"percentile":168},"2026-04-21",0.03718,{"date":170,"score":120,"percentile":171},"2026-04-22",0.03727,{"date":173,"score":120,"percentile":174},"2026-04-23",0.03725,{"date":176,"score":120,"percentile":177},"2026-04-24",0.03722,{"date":179,"score":120,"percentile":180},"2026-04-25",0.03732,{"date":182,"score":120,"percentile":174},"2026-04-26",{"date":184,"score":120,"percentile":185},"2026-04-27",0.03712,{"date":187,"score":120,"percentile":188},"2026-04-28",0.03754,{"date":190,"score":120,"percentile":191},"2026-04-29",0.0377,{"date":193,"score":120,"percentile":194},"2026-04-30",0.03766,{"date":196,"score":197,"percentile":198},"2026-05-01",0.00018,0.04537,{"date":200,"score":197,"percentile":201},"2026-05-02",0.04534,{"date":203,"score":197,"percentile":204},"2026-05-03",0.0453,{"date":206,"score":197,"percentile":207},"2026-05-04",0.04526,{"date":209,"score":197,"percentile":210},"2026-05-05",0.04523,{"date":212,"score":197,"percentile":213},"2026-05-06",0.0452,{"date":215,"score":197,"percentile":216},"2026-05-07",0.04553,{"date":218,"score":197,"percentile":219},"2026-05-08",0.04556,{"date":221,"score":197,"percentile":222},"2026-05-09",0.04593,{"date":224,"score":197,"percentile":225},"2026-05-10",0.04607,{"date":227,"score":197,"percentile":228},"2026-05-11",0.04594,{"date":230,"score":197,"percentile":231},"2026-05-12",0.04596,{"date":233,"score":197,"percentile":234},"2026-05-13",0.04603,{"date":236,"score":197,"percentile":234},"2026-05-14",{"date":238,"score":197,"percentile":239},"2026-05-15",0.0461,{"date":241,"score":197,"percentile":242},"2026-05-16",0.0462,{"date":244,"score":197,"percentile":245},"2026-05-17",0.04617,{"date":247,"score":197,"percentile":248},"2026-05-18",0.04591,{"date":250,"score":197,"percentile":251},"2026-05-19",0.0458,{"date":253,"score":197,"percentile":254},"2026-05-20",0.04579,{"date":256,"score":197,"percentile":257},"2026-05-21",0.04577,{"date":259,"score":197,"percentile":260},"2026-05-22",0.0476,{"date":262,"score":263,"percentile":264},"2026-05-23",0.00019,0.0543,{"date":266,"score":263,"percentile":267},"2026-05-24",0.05437,{"date":269,"score":263,"percentile":270},"2026-05-25",0.05421,{"date":272,"score":263,"percentile":273},"2026-05-26",0.05419,{"date":275,"score":263,"percentile":276},"2026-05-27",0.05451,{"date":278,"score":263,"percentile":279},"2026-05-28",0.05529,{"date":281,"score":263,"percentile":282},"2026-05-29",0.05542,{"date":284,"score":263,"percentile":285},"2026-05-30",0.05537,{"date":287,"score":263,"percentile":288},"2026-05-31",0.05523,{"date":290,"score":263,"percentile":291},"2026-06-01",0.05467,{"date":293,"score":263,"percentile":294},"2026-06-02",0.05385,{"date":296,"score":263,"percentile":297},"2026-06-03",0.05346,{"date":299,"score":263,"percentile":300},"2026-06-04",0.05345,{"date":302,"score":263,"percentile":303},"2026-06-05",0.05367,{"date":305,"score":306,"percentile":307},"2026-06-06",0.0002,0.05674,{"date":309,"score":306,"percentile":310},"2026-06-07",0.05675,{"date":312,"score":306,"percentile":313},"2026-06-08",0.05633,{"date":315,"score":306,"percentile":316},"2026-06-09",0.05669,{"date":318,"score":306,"percentile":319},"2026-06-10",0.05692,{"date":321,"score":306,"percentile":322},"2026-06-11",0.05724,{"date":324,"score":306,"percentile":325},"2026-06-12",0.05748,{"date":327,"score":306,"percentile":328},"2026-06-13",0.05739,{"date":330,"score":306,"percentile":331},"2026-06-14",0.05731,{"date":333,"score":84,"percentile":334},"2026-06-15",0.35785,{"date":336,"score":84,"percentile":337},"2026-06-16",0.35842,{"date":339,"score":84,"percentile":340},"2026-06-17",0.35884,{"date":342,"score":84,"percentile":343},"2026-06-18",0.35954,{"date":345,"score":84,"percentile":346},"2026-06-19",0.35939,{"date":348,"score":84,"percentile":349},"2026-06-20",0.35931,{"date":351,"score":84,"percentile":352},"2026-06-21",0.35918,{"date":354,"score":84,"percentile":355},"2026-06-22",0.35908,{"date":357,"score":84,"percentile":358},"2026-06-23",0.35986,{"date":360,"score":84,"percentile":361},"2026-06-24",0.36016,{"date":363,"score":84,"percentile":364},"2026-06-25",0.36097,{"date":366,"score":84,"percentile":367},"2026-06-26",0.36138,{"date":369,"score":84,"percentile":370},"2026-06-27",0.36174,{"date":372,"score":84,"percentile":373},"2026-06-28",0.3615,[375,380],{"source":88,"cvss_v2_0":9,"cvss_v3_0":376,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":86,"baseSeverity":377,"vectorString":89,"impactScore":378,"exploitabilityScore":379},"MEDIUM",2.3,10,{"source":94,"cvss_v2_0":9,"cvss_v3_0":381,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":86,"baseSeverity":377,"vectorString":89,"impactScore":378,"exploitabilityScore":379},[383],{"ecosystem":9,"name":384,"vendor":385,"product":384,"cpe_part":386,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":387},"node","nodejs","a",[388,393,396,399],{"version":389,"is_range":390,"range_type":88,"version_start":391,"version_start_type":392,"version_end":391,"version_end_type":392,"fixed_in":9},">= 20.20.1, \u003C= 20.20.1",true,"20.20.1","including",{"version":394,"is_range":390,"range_type":88,"version_start":395,"version_start_type":392,"version_end":395,"version_end_type":392,"fixed_in":9},">= 22.22.1, \u003C= 22.22.1","22.22.1",{"version":397,"is_range":390,"range_type":88,"version_start":398,"version_start_type":392,"version_end":398,"version_end_type":392,"fixed_in":9},">= 24.14.0, \u003C= 24.14.0","24.14.0",{"version":400,"is_range":390,"range_type":88,"version_start":401,"version_start_type":392,"version_end":401,"version_end_type":392,"fixed_in":9},">= 25.8.1, \u003C= 25.8.1","25.8.1"]